TL;DR
- FDA doesn't grade a Warning Letter response on tone or speed. It grades it against specific adequacy factors in the agency's own Regulatory Procedures Manual: whether the fix reaches related violations and related products or facilities, whether it's documented well enough to verify from a distance, and whether it holds up over time (FDA Regulatory Procedures Manual, Ch. 4).
- A close-out letter is never issued on promises. FDA requires actual, verified correction, "usually" confirmed through a follow-up inspection, not a written commitment alone (FDA, About Warning and Close-Out Letters).
- The written response is due within 15 working days of the letter, per the same manual, but a fast response that misses the underlying system failure fails anyway.
- Below: an 8-point checklist built directly from FDA's own stated evaluation criteria, not from generic advice.
- Wizcure Pharmaa suspended manufacturing, hired a consultant, and still got rejected on all four citations in its warning letter. Activity was never the test.
What actually makes an FDA warning letter response "adequate" enough to close out?
Wizcure Pharmaa Private Limited did the things a firm is supposed to do after a warning letter. It suspended manufacturing. It hired a third-party consultant. It committed to a voluntary recall. FDA reviewed that response against the letter's four citations and rejected it on every one, because none of it answered what FDA actually asked: not what will change going forward, but what happened to the product already made, and whether the underlying system could be trusted at all (Argus HQ, Wizcure Pharmaa case study).
That gap between "we responded" and "FDA accepted the response" is where most compliance teams misjudge the assignment. A response can be prompt, sincere, and still fail. FDA isn't scoring effort. It's checking a specific, published set of adequacy factors, and most of the advice circulating about warning letter responses skips straight past them in favor of generic reassurance about tone and timing.
Here's the actual checklist, built from FDA's own Regulatory Procedures Manual rather than the folk version.
Speed is a deadline. It is not the test.
Fifteen working days. That's the norm FDA's Regulatory Procedures Manual gives for a written response after a warning letter, and it's worth hitting (FDA Regulatory Procedures Manual, Ch. 4). But treating the 15-day clock as the hard part of this exercise is exactly the mistake that produces responses like Wizcure's: fast, visible, and rejected on the merits.
Nowhere in the manual's list of what a reviewing office actually weighs does "responded quickly" appear as a standalone factor. What appears instead is a set of questions about whether the fix is real, whether it's provable, and whether it will hold. Those are the questions worth answering before the clock, not instead of it.
The 8-point adequacy checklist FDA actually uses
FDA's Regulatory Procedures Manual, Chapter 4, lists the factors a program office or center weighs when deciding whether a firm's corrective action is adequate. The checklist below maps directly to that language, plus the separate close-out letter standard.
| # | Checklist item | What FDA is actually checking |
|---|---|---|
| 1 | Root cause reaches the system, not the incident | Whether the corrective action "addresses the specific violations, related violations, related products or facilities" — not just the one example FDA happened to cite (FDA RPM Ch. 4) |
| 2 | Built-in monitoring and review | Whether the plan "contains provisions for monitoring and review to ensure effectiveness and prevent recurrence," not a one-time fix |
| 3 | Documentation supports remote verification | Whether documentation was provided "to enable the agency to undertake an informed evaluation" without needing to ask follow-up questions |
| 4 | Timeline matches actual progress | Whether "the timeframe for the corrective action is appropriate and whether actual progress has been made in accordance with the timeframe," not just promised |
| 5 | The fix is durable, not reversible | Whether the correction "ensures sustained compliance," explicitly flagged against corrections that are "easily reversible" |
| 6 | Risk of the product is addressed directly | Whether the response accounts for "the risk associated with the product and the impact of the violations on such risk" |
| 7 | Response filed within the window, or a documented reason why not | The 15-working-day norm; late or silent responses read as the firm not taking the letter seriously |
| 8 | Evidence ready for a follow-up inspection | Close-out letters are "based on actual verified corrections," almost always confirmed by an on-site follow-up, not the written response alone (FDA, About Warning and Close-Out Letters) |
Eight items. None of them is "write a polite letter."
Why item 1 kills more responses than any other
FDA's language is specific: the corrective action needs to address the specific violation and related violations and related products or facilities. That "related" clause is the one most responses skip. A team fixes the exact line item cited in the letter and stops there.
Wizcure's response suspended the line that had the fabricated microbial-plate results. It did not include, per FDA's rejection, "a comprehensive evaluation of whether the aseptic facility was even suitable for sterile manufacturing" or "a retrospective risk assessment of batches made on the rusted, unsuitable equipment" (Argus HQ, Wizcure Pharmaa case study). The firm treated a systemic quality-unit failure as a single bad batch. FDA didn't.
If your warning letter cites a data-integrity problem in one lab, ask whether the same failure mode exists in any other lab, any other product line, any other shift. FDA's own manual says that's part of the test. Skipping it isn't cutting a corner on paperwork. It's failing the actual standard.
Why "we hired a consultant" isn't a checklist item
It shows up in almost every rejected response, and it isn't wrong to do. It's just not, by itself, evidence of anything on the list above. A consultant engagement answers none of the eight items directly: it doesn't show root cause, it doesn't show monitoring provisions, and it doesn't show that documented corrections were actually verified.
Teams reach for a consultant because it's an action that can be taken and reported within 15 working days. That's exactly the trap. FDA's evaluation isn't asking what actions were taken. It's asking whether the actions taken satisfy items 1 through 6 above, with the documentation to prove it under item 3, on a timeline that matches item 4.
What "sustained compliance" rules out
Item 5 gets missed constantly because it sounds abstract until you see the concrete example FDA itself uses: a correction made by pulling claims off a website. That kind of fix is trivially reversible, and FDA's own guidance says corrections offered for internet-marketed products get extra scrutiny for exactly that reason, since a firm could restore the same claims the day after a follow-up review concludes (FDA RPM Ch. 4).
The same logic applies well beyond websites. A retrained employee is reversible the moment that employee leaves or gets busy. A temporarily halted production line is reversible the day it restarts. What survives item 5 is a changed procedure, a changed specification, a changed piece of equipment, something that doesn't depend on someone remembering to keep doing the right thing.
The close-out letter isn't a formality. It's a second inspection in disguise.
This is the part most responses treat as an afterthought. FDA's own program states plainly: a close-out letter "will not be issued based on representations that some action will or has been taken. The corrective actions must actually have been made and verified by FDA," and "usually, the standard for verifying that corrections have been implemented will be a follow-up inspection" (FDA, About Warning and Close-Out Letters).
Read that again. The written response you spend three weeks drafting is not the final exam. It's the entrance ticket to one. FDA's own internal timeline gives program offices and centers up to 65 working days to issue a close-out letter once they have the information needed to decide (FDA RPM Ch. 4), which in practice usually means after that follow-up inspection has already happened. Build item 8 into your CAPA plan from day one: what evidence, in what form, will an inspector be able to check in person, not just read on paper.
A response that would actually pass all 8
Picture a firm cited for the same kind of data-integrity failure Wizcure had. A response built to clear this checklist would look different from Wizcure's in specific ways: it would extend the investigation to every lab using the same testing method, not just the one where the fabrication was caught (item 1). It would add a second-person review step to the SOP itself, not a memo asking people to be more careful (items 2 and 5). It would include the underlying validation data and revised procedures as attachments, not summaries (item 3). It would set a completion date the firm could actually defend with a status update at the 15-day mark if the work wasn't finished (item 4). And it would assume, correctly, that FDA is coming back to check in person before any close-out letter gets written (item 8).
None of that is exotic. It's slower to write than "we stopped and hired someone." That's the trade every compliance team is actually making when a letter lands: writing the response that reads well in 15 working days, or writing the one built to survive the inspection that comes after it.
FAQ
Does FDA publish a formal scoring rubric for warning letter responses?
Not a numeric rubric, but a stated set of evaluation factors. FDA's Regulatory Procedures Manual, Chapter 4, lists what a program office or center weighs when judging the adequacy of a firm's corrective action, including risk to the product, whether the fix reaches related violations and facilities, documentation quality, timeline realism, and whether compliance will be sustained.
If I respond within 15 working days, will FDA issue a close-out letter automatically?
No. Timeliness is one factor among several, not a substitute for the others. FDA can and does reject responses that arrive on time but don't address the underlying system, as happened with all four citations in Wizcure Pharmaa's case.
What actually triggers a close-out letter?
Verified, completed corrective action, not a written promise. FDA's own program page states a close-out letter is issued once the agency has evaluated corrective actions and confirmed, usually through a follow-up inspection, that the violations were actually fixed.
Can a company get a close-out letter without a follow-up inspection?
It's possible in limited cases, but FDA states the standard method of verification is a follow-up inspection. Firms should plan for one rather than assume documentation alone will be sufficient, especially for facility- or process-related citations.
What happens if the violations can't technically be corrected, like a shipment that already left the facility?
FDA states plainly that no close-out letter will issue when a warning letter contains violations that by their nature aren't correctable. In those cases, the firm's response should focus on preventing recurrence rather than reversing something already done.
Is a corrective action plan the same thing as a warning letter response?
The written response is the document; the corrective action plan is what it needs to describe in enough detail to satisfy FDA's adequacy factors. A response that asserts a CAPA plan exists without the documentation to support it fails item 3 on the checklist above regardless of how the rest of the letter reads.
Argus $99 vs FDAzilla $5k/yr — see why →
Sources: FDA Regulatory Procedures Manual, Chapter 4 — Advisory Actions, FDA, About Warning and Close-Out Letters. Related: How long does a company have to respond to an FDA Warning Letter?, What's the difference between a Form 483 and an FDA Warning Letter?, Wizcure Pharmaa FDA Warning Letter 320-26-97. Byline: Andy Gaber. Published 2026-07-10.